CVE-2006-6196

CVE-2006-6196 describes a cross-site scripting (XSS) vulnerability in the search functionality of the Fixit iDMS Pro Image Gallery. The issue allows remote attackers to inject arbitrary web script or HTML via the search field (txtsearchtext parameter). The NVD entry lists a CVSSv2 base score of 6...

CVE-2006-6196: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote attackers to inject arbitrary web script or HTML via a search field txtsearchtext parameter...

CVE-2006-6195: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL commands via the 1 showid or 2 parentid parameter to a filelist.asp, or the 3 fid parameter to b showfile.asp...